Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/24DDD1C4A5A711F09981CADFDAE4EC9C.roa
File: 24DDD1C4A5A711F09981CADFDAE4EC9C.roa (raw, json)
Hash identifier: VMl5oou874hFWogxEQIYM0u11ETAx2cwP1WKWFliKgk=
Subject key identifier: 4B:5F:FC:01:C5:01:1A:DB:C2:6E:C8:54:FE:4B:29:FB:71:49:E7:BE
Certificate issuer: /CN=F3674376AF/serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Certificate serial: 04
Authority key identifier: 5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/24DDD1C4A5A711F09981CADFDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 07:02:55 +0000
ROA not before: Fri 10 Oct 2025 07:02:50 +0000
ROA not after: Mon 31 Dec 2035 07:02:50 +0000
asID: 329631
IP address blocks: 102.204.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 05:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674376AF, serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Validity
Not Before: Oct 10 07:02:50 2025 GMT
Not After : Dec 31 07:02:50 2035 GMT
Subject: CN=68e8af9f-bedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:aa:5b:c2:d8:55:1c:a4:72:b8:f7:eb:f3:
7c:25:ae:bc:a1:5b:71:7a:61:1f:9d:c4:65:67:3c:
2b:8f:2d:c0:1b:7f:cf:7a:5a:58:fe:16:47:f2:24:
41:a2:b1:de:f1:99:ef:21:8d:02:1b:32:7d:9a:40:
d7:99:31:ba:8b:5a:cd:ae:e8:4d:e2:75:93:af:9a:
d3:c4:42:83:b3:09:8e:1b:07:80:ed:6b:86:61:12:
23:b6:2a:b3:73:c0:59:d8:52:ff:ea:6c:43:90:83:
3b:22:be:9e:2b:6f:15:4b:15:98:22:c7:5e:c7:82:
41:ba:35:63:ac:3a:83:1c:29:92:c6:86:dd:1a:29:
37:85:05:8e:f3:12:7a:e7:8f:f3:df:23:3e:7a:78:
fb:e3:2e:30:1f:b9:6f:43:80:be:bf:d3:2d:5f:f6:
c7:c8:e2:74:54:a5:a6:7c:3f:c8:60:de:0b:02:5d:
c9:7f:07:78:26:ee:28:6b:e9:36:3a:9d:b5:1b:35:
ad:1c:29:3f:99:89:64:f8:f1:73:43:3b:cf:b1:84:
9d:3d:e3:05:d2:7c:00:11:ef:ee:15:65:b8:4e:f2:
64:be:9d:59:1d:62:48:04:9e:76:8e:8e:86:25:32:
ba:40:02:c8:9c:08:bc:e5:9b:07:a0:79:8f:a7:34:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:FC:01:C5:01:1A:DB:C2:6E:C8:54:FE:4B:29:FB:71:49:E7:BE
X509v3 Authority Key Identifier:
keyid:5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/24DDD1C4A5A711F09981CADFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:59:65:cb:df:59:4a:b4:bb:8c:fc:2f:31:dc:bd:73:10:d7:
6c:c3:b4:1e:c4:0b:44:0a:cb:a9:8e:c6:93:56:fc:ac:81:6c:
f6:82:46:54:9b:3d:41:c9:8c:29:8d:3e:fe:a4:a2:a6:ec:a9:
b9:0f:2f:25:71:68:e9:9e:b1:ec:85:50:25:44:99:c8:a1:ca:
33:22:e4:8e:91:02:72:c7:2d:9b:31:81:8b:aa:a8:44:54:bd:
0e:a4:d1:34:2b:ba:44:76:12:a5:e5:18:48:99:eb:ca:ec:ea:
8b:f2:25:f0:47:db:32:8d:aa:74:b0:75:8b:66:12:1b:c9:a6:
78:75:c9:39:fe:a1:0e:5d:83:9a:95:cf:3c:64:49:7c:30:90:
02:f2:ed:80:0c:8d:53:e6:60:c2:16:d2:c2:25:e0:6b:a8:b1:
57:b0:8b:13:74:88:ef:17:1d:66:d7:0b:8f:c0:ff:e1:0b:a6:
5c:af:36:e9:9b:97:93:45:e2:37:a8:b0:91:6c:46:3f:6a:3c:
0c:bf:83:c3:9a:c6:4c:4a:ae:9a:1a:73:96:dd:12:34:3f:2e:
a0:a5:ae:11:62:e3:9e:81:9a:6c:d8:90:92:62:22:8d:96:43:
29:f3:b8:27:17:2e:1c:f4:8d:9b:ac:2f:18:ae:0c:4e:75:ae:
6f:d0:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:16 2025 by rpki-client